Security
5,347 items in 29 lists
-
Doorman github.com
osquery fleet manager that allows remote management of osquery configurations retrieved by nodes. It takes advantage of osquery's TLS configuration, logger, and distributed read/write endpoints, to give administrators visibility across a fleet of devices with minimal overhead…
-
Visualize_Logs github.com
Open source visualization library and command line tools for logs (Cuckoo, Procmon, more to come).
-
wxHexEditor github.com
-
Leonidas github.com
Automated Attack Simulation in the Cloud, complete with detection use cases.
-
IdentityModel.OidcClient github.com
C# / .NET OpenID Connect relying party client certified library for native mobile/desktop applications.
-
kwprocessor github.com
Advanced keyboard-walk generator with configureable basechars, keymap and routes.
-
CuckooDroid github.com
Android extension for Cuckoo sandbox
-
sandboxapi github.com
-
nightHawk github.com
Application built for asynchronous forensic data presentation using ElasticSearch as the backend. It's designed to ingest Redline collections.
-
StegCracker github.com
Steganography brute-force utility to uncover hidden data inside files.
-
Glastopf github.com
-
AndBug github.com
-
kAFL github.com
(2017) - A hardware-assisted x86-64 VM kernel fuzzing framework with performant VM reloads for finding OS kernel vulnerabilities.
-
Google Play crawler (Java) github.com
-
Gato-X github.com
GitHub Attack Toolkit - Extreme Edition.
-
KEVM github.com
A formal model of the EVM in the K framework.
-
FlawFinder github.com
David Wheeler - Scan C / C++ code for potential security weaknesses.
-
iocextract github.com
-
OpenSOC github.com
OpenSOC integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
-
bXSS github.com
-
Jenkins Attack Framework github.com
This tool can manage Jenkins tasks, like listing jobs, dumping credentials, running commands/scripts, and managing API tokens.
-
WINNIE github.com
(2021) - A Windows application fuzzer that combines harness synthesis with fast process cloning to test code beyond graphical interfaces.
-
nsa-rules github.com
Password cracking rules and masks for hashcat generated from cracked passwords.
-
MalSploitBase github.com
-
FireEye's Sunburst Countermeasures github.com
-
mozilla-django-oidc github.com
A Django OpenID Connect relying party library maintained by Mozilla.
-
AFLGo github.com
(2017) - An AFL-based directed greybox fuzzer that generates inputs to reach specified target locations in a program.
-
Phantom Community Playbooks github.com
Phantom Community Playbooks for Splunk but also customizable for other use.
-
dstack github.com
-
Insider CLI github.com
A open source Static Application Security Testing tool (SAST) written in GoLang for Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C# and Javascript (Node.js).
-
friTap github.com
Intercept SSL/TLS connections with Frida; Allows TLS key extraction and decryption of TLS payload as PCAP on Android in real-time.
-
HASSH github.com
-
USB Keystroke Injection Protection github.com
-
DFIRTrack github.com
Incident Response tracking application handling one or more incidents via cases and tasks with a lot of affected systems and artifacts.
-
Machinae github.com
-
Catalyst github.com
A free SOAR system that helps to automate alert handling and incident response processes.
-
Androwarn github.com
detects and warns the user about potential malicious behaviors developed by an Android application.
-
Damn Vulnerable LLM Agent github.com
A sample chatbot powered by a ReAct agent, implemented with Langchain. It's designed to be an educational tool for security researchers, developers, and enthusiasts to understand and experiment with prompt injection attacks in ReAct agents.
-
JShell github.com
-
pwntools writeups github.com
A collection of CTF write-ups all using pwntools.
-
Fileintel github.com
Pull intelligence per file hash.
-
Dalton github.com
Suricata and Snort IDS rule and pcap testing system.
-
Chronicle (GCP) Detection Rules github.com
Chronicle's detection rules written natively for the Chronicle Platform.
-
CCF-VM github.com
CyLR CDQR Forensics Virtual Machine (CCF-VM): An all-in-one solution to parsing collected data, making it easily searchable with built-in common searches, enable searching of single and multiple hosts simultaneously.
-
PFQ github.com
PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission (10G and beyond), in-kernel functional processing and packets steering across sockets/end-points.
-
Kubectrl Kubesec github.com
ControlPlane - Plugin for kubesec.io to perform security risk analysis for Kubernetes resources.
-
FastIR Collector github.com
Tool that collects different artifacts on live Windows systems and records the results in csv files. With the analyses of these artifacts, an early compromise can be detected.
-
SEPTun-Mark-II github.com
Extreme Performance Tuning guide - Mark II.
-
FwAnalyzer github.com
Analyze security of firmware based on customized rules. Intended as additional step in DevSecOps, similar to CI.
-
CANard github.com
A Python framework for Controller Area Network applications.
- next page of items loading…
